Fix regression from 426b1244fbf6. rval needs to be set for the ending primtive conversion block to work correctly.

This commit is contained in:
David Mandelin 2010-05-26 13:50:01 -07:00
parent efe77133ba
commit 2dbeb42aff

View File

@ -1773,9 +1773,7 @@ BEGIN_CASE(JSOP_CALLPROP)
if (!atom) {
ASSERT_VALID_PROPERTY_CACHE_HIT(0, aobj, obj2, entry);
if (entry->vword.isFunObj()) {
regs.sp[-1].setFunObj(entry->vword.toFunObj());
PUSH_COPY(lval);
goto end_callprop;
rval.setFunObj(entry->vword.toFunObj());
} else if (entry->vword.isSlot()) {
uint32 slot = entry->vword.toSlot();
JS_ASSERT(slot < obj2->scope()->freeslot);